Top 10 2014-I10 Poor Physical Security

Back To The Internet of Things Top 10

Threat Agents	Attack Vectors	Security Weakness		Technical Impacts	Business Impacts
Application Specific	Exploitability EASY	Prevalence COMMON	Detectability AVERAGE	Impact SEVERE	Application / Business Specific
Consider anyone who has physical access to the device.	Attacker uses vectors such as USB ports, SD cards or other storage means to access the Operating System and potentially any data stored on the device.	Physical security weaknesses are present when an attacker can disassemble a device to easily access the storage medium and any data stored on that medium. Weaknesses are also present when USB ports or other external ports can be used to access the device using features intended for configuration or maintenance.		Insufficient physical security could lead to compromise of the device itself and any data stored on that device.	Data could be stolen or modified and the device taken control of for purposes other than what was originally intended. Could your users be harmed? Could your brand be harmed?

Is My Physical Security Sufficient? TEXT

How Do I Physically Secure My Device? Ensuring a secure mobile interface requires: Ensuring ... Ensuring ... Ensuring ... Ensuring ...

Example Attack Scenarios Scenario #1: The interface only requires simple passwords. Example Scenario #2: Username and password are poorly protected when transmitted over the network. Example In the cases above, the attacker is able to either easily guess the password or is able to capture the credentials as they cross the network and decode it since the credentials are only protected using Base64 Encoding.

References OWASP External